CVE-2026-31431
Named by 10 kept items in this workspace.
8 items name it under cves and 2 under classification.key entities.
Search every workspace for CVE-2026-31431. It matches the name as written, so it can find other things that share it.
The items that name it 10
Vulnerability in the Linux kernel's algif_aead crypto API allowing zero-copy page cache corruption leading to local privilege escalation. Introduced to the 4.14 Linux kernel in 2017 via commit 72548b093ee3. Announced by researchers at Xint Code on April 29, 2026.
'Copy Fail' vulnerability, predecessor to Dirty Frag
Universal Linux local privilege escalation vulnerability allowing an unprivileged local user to write 4 controlled bytes into the page cache of any readable file to gain root access; also enables container escape in certain scenarios. Discovered by Xint. Stems from a logic flaw in the Linux kernel's
Logic bug in the Linux kernel's authencesn cryptographic template allowing an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any readable file, leading to local privilege escalation and container escape.
9-year-old Linux kernel local privilege escalation (LPE) found by AI-assisted fuzzing; a straight-line logic flaw in authencesn requiring no race window or kernel-specific offset, chained through AF_ALG and splice() into a 4-byte page-cache write. Kernel built between 2017 and the patch is in scope.
All cves in this workspace.